Use raw filename for MAL updates (not hashed/masked), but give warning